ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
LITO11B HH Protection of plant against overfilling of QA-8008 / impossibility to use Closed Drain 


Initiation Time risk BPCS Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood = | (health) Event 
(occ./year) likelihood 
0,10 0,10 


Overfilling of QA-V-8008 leading Pump QA-P- 0,05 0,10 0,10 1,00 
to liquid carry over to cold vent. 8006A/B failure 

Release of liquid from cold vent 

and possibile pool fire 


Pump QA-P- 0,05 0,10 0,10 0,10 0,10 1,00 
8007A/B failure 


Failure of LIC-012 0,10 0,10 1,00 0,10 0,10 1,00 
stopping pump QA- 
P-8006A/B 


Spurious closure of 
ESDV-008 


Spurious closure of 
XV-031A/B in pump 
discharge line 


Release of gas and fire from cold vent stack. Minor impact to operators since the fire is located inside a fenced area 
(normally unmanned) 

Release of gas and fire from cold vent stack.Limited impact; Dispersion of combustion fumes in case of fire 

Limited impact ,possible repair of flame arrestor and cold vent piping ,complete plant shutdown for 3 days for maintenance 
plus the cost of repair (15 MS 


vailability of spare pump automatically started up by control loop 


| 12 [Team agrees to select a SIL 1 requirement for the analysed SIF 


Note for Verification The necessary actions for ESD2 to mitigate this event are : 
Compressor shutdown 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


| Interlock —— ű e| LIT002_003_032 HH Protection of plant against low low pressure in instrument air header 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overfilling of existing KO ivati 0,10 
drum leading to possible level 1 leading to 
excessive flaring leading to level increase of 
mechanical damage to existing KO drum 
a 


Overfilling of QA- 
8005A/B 


Es es ee ee es ae ae] 
A SS a a 
ee ee ee ee ee ee ee: eee eee 


ee ee ee rr a ee eee eee eee ee 
Ed oul a PO (Aca (SO 


Liquid carry over to flare. Possible significant flaring leading to injury. 
|E IL Liquid carry over to flare. Possible significant dispersion of combustion gas. 
ales Potential damage to flare accessory ; Complete plant shutdown for 3 days for maintenance plus the cost of repair (15 


| 2 
ze 
a 
| 5 [87 


| 12 [Team agrees to maintain 2 oo 3 voting logic in order to have high realiabilty against spurious trip 


The necessary valves for ESD1 safe activation are: 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock —— ű e| LIT037_341_344 HH Protection of plant against low low pressure in instrument air header 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood E (health) Event 
(occ./year) likelihood 
Overfilling of existing KO ivati 0,10 
drum leading to possible level 1 leading to 
excessive flaring level increase of 
existing KO drum 


Overfilling of QA- 
8005A/B 


G e a e e o e e a aO 
a e ee ee ae e e e ea ae a 
ee es ee ee ee 


I A ee eee 
LI = (OC (cA 


NOTES 


ue Liquid carry over to flare. Possible significant flaring leading to injury. 
| E [Liquid carry over to flare. Possible significant dispersion of combustion gas. 


ki Potential damage to flare accessory ; Complete plant shutdown for 3 days for maintenance plus the cost of repair (15 
M$). 


T E 
as 


LI 341H 
Team agrees to maintain 2 oo 3 voting logic in order to have high realiabilty against spurious trip 


The necessary valves for ESD1 safe activation are: 
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ICARO 


Impact event description 


Loss of instrument air to 
user leading to loss of 
process control and 
uncontrolled unit shut down 


a CC a A CC 
i E a ES | E 
Lee a SS ee ee 
= aa ee es 


Uncontrolled plant shud down leading to no impact to operators 
Uncontrolled plant shut down; potential for flaring. 


Initiation 
likelihood 
(occ./year) 
Failure of PICO73 
stopping the 
compressor QA-K- 
8002A/B/C 


Failure or air 
compressor QA-K- 
8002A/B/C 


Uncontrolled plant shut down; potential for maintenance activity pre start up for 1 day (SMS) 


SIL Allocation (LOPA methodology) 


Protection of plant against low low pressure in instrument air header 


Team agrees to maintain 2 oo 3 voting logic in order to have high realiabilty against spurious trip . 


The necessary valves for ESD2 safe activation are: 


\\13182|_LOPA_ENPPI_rev01_build10 


sh. 4/78 


(health) 


le ed Lika 


Intermediate | SIF integritiy 
Event 
likelihood 


ENPPI 
QASR Compression project 


PITO79ABCLL 


ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
0,10 1,00 1,00 


Possible gas hammering in 0,05 1,00 1,00 
down stream piping leading 
to potential mechanical start up due to 
damage. Limited leakage misoperation. 
and fire. 
ee EOE eS SS ee Se Te rr a 


a CC CS eS CC CC 
a a a ee es ee ee 
a) eee a a S| a ees ee 
= = ee ee ee ee ee ee ee ee 


NOTES 


Limited leakage leading to fire. Possible for permenant injury. 
Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of compressor circuit. Two days complete shutdown plus repairing of weak points (9 MS) 


Active only during start up 


ESDV 031A is equipped with limit switches with alarm in DCS 


ee U 
Ee o OE 
Aal OE 
| 5 ļActive only during startup S OE 
6l S fE 
| 7_|ESDV 031A is equipped with limit switches with alarmin DCS _ S ë O 
Bl i Ek 
ol i OE 
of S OE 
aJ S Oek 
Ee o ñE 


= 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
0,10 1,00 1,00 


Possible hammering in 0,05 1,00 1,00 
down stream piping leading 
to potential mechanical start up due to 
damage . misoperation. 
PoP S S e S S 


ees eee eee eee eee eee eee ee eee eee eee e 
a ee A ee ee 
ie ca a A (| 
= a ee ee eee eee ee ee eee ee 


NOTES 


Limited leakage leading to fire. Possible for permenant injury. 
Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of compressor circuit. Two days complete shutdown plus repairing of weak points (9 MS) 


ee) 


N 


760 h/y 
ESDV 031A is equipped with limit switches with alarm in DCS 


Assumed that 1/10 of times, the damage effectively occurs. 


6 
7 
8 
| 9 | 


= 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| LIT101 LL Protection against low low level in QA-V-8001 A leading to gas blow by to QA-V-8005A/B 


Impact event description Initiation Time risk BPCS Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
1,00 0,10 1,00 


Gas blow by to the 0,10 1,00 0,01 
condensate suction drum 
QA-V-8005A leading to 
overpressurization. Possible 
mechanical damage. 
QO S a en 


CS CC a CC e 
i E e A | E 
Re Ee Ee ee eee ee ee ee eee ee 
= aa ea ee ee eee ee 


NOTES 


H Significant leakage leading to fire. Possible for 1 fatality 
Significant leakage of flammable gas and fire. Dispersion of combustion fumes. 
Mechanical damage of condensate suction drum for long period + cost of repair. Spare drum is available (5 MS) 


PICOO3 venting excess of pressure to flare circuit 


PSV007A/B sized for this scenario 


A 
Ee S OE 
B OO es 
CEE a r]; 
|6 |PICOO3 venting excess of pressuretoflarecircuit o O 
D E 
E; 
| 9 |PSV007A/B sized for this scenario o OE 
of o OE 
aJ s OE 
2) o ñk 


= 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


LIT107 HH Protection of compressor QA-K-8001A due to liquid carry over from suction KO drum 


Initiation Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood Event 
(occ./year) likelihood 
Overfilling of QA-V-8001A Spurious closure of 
leading to liquid carry over ESDV 103 
to the compressor QA-K- 
8001A with possible 
mechanical damage 


Manual valves in 
the condensate 
outlet line of QA-V- 
8001A closed due to 
misoperation 


A AO E A A E A 
BEM es ee ee ee A eee ee 


= = a A (Oe 


LI108 H 


Presence of compressor casing to reduce impact to people 
High high vibration to shut down the compressor 


The necessary valves for ESD3 safe activation are: 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| PIT110 LL Protection against low low pressure in compressor QA-K-8001A suction 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 0,10 


Compressor QA-K-8001A Manual valves in 1,00 0,10 
Surge leading to possible the suction line of 
mechanical damage. QA-V-8001 A closed 

due to misoperation 


Spurious closure of 
ESDV 101A 


CC A e 
E c A T a E S S e E 
E ce ee ee ee 
= 2 C A | a 


NOTES 


Damage to compressor internals leading to gas release to atmospher through secondary vent 
Significant leakage of flammable gas and fire. Dispersion of combustion fumes. 
A |Mechanical damage of compressor and stop of production for long period + cost of repair. In early production, a spare 
is avalable with no loss of production. In later stage, failure will lead to half of production loss. 


Compressor anti surge controller 
Low pressure alarm on P1112 


| 6 | 
Bl O 
| 9 [Vibration trip VS102A/B/C/D HH 

SS 
De 
2l o O 


The necessary valves for ESD3 safe activation are: 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


| Interlock ——— ű e| PIT111 HH Protection against high high pressure in compressor QA-K-8001A discharge 


QASR Compression project 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 0,10 0,10 


Overpressurization of QA-K- Spurious closure of 

8001A discharge line leading ESDV102A in 

to mechanical damage discharge of 
compressor 


Spurious closure of 
ESDV032A upstream 
TI06 
Spurious closure of 
ESDV033A upstream 
T104 


Manual valves on 
QA-E-8001A left 
closed due to 
misoperation 


ee a aaa eae p a as aaa aaa ea 
a es ee ee ee ee 
eee ee ei 
= aaa SS eee ee eee 


NOTES 


H Significant leakage of flammable gas and fire. Possible multiple fatalities 
Significant leakage of flammable gas and fire. Dispersion of combustion fumes. 
Mechanical damage of compressor and stop of production for long period + cost of repair. In early production, a spare 


is avalable with no loss of production. In later stage, failure will lead to half of production loss. 


Manual valve not normally operated during compressor running. 
Anti surge controller for the compressor QA-K-8001A/B/C/D 


High pressure alarm on P1112 (a, b, c, d) 


Consider to configure manual valve QAE8001A locked open 
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ENPPI 


SIL Allocation (LOPA methodology) 
QASR Compression project 


ICARO 


| Interlock ——— ű e| TIT102 HH Protection against high high temperature in compressor QA-K-8001A discharge 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood el he ae (health) Event 
(occ./year) likelihood 
1,00 1,00 0,10 


More Temperature in the 0,05 1,00 1,00 
compressor QA-K-8001A from upstream 
discharge line leading to existing facility 
possible mechanical 
damage 
[as a ee as i es a a ee ee eee ee 


ES SF SS SEE trkWO,n——ow. SSS eS SSS SSS OS S__V">Ixt—>“uvuMBSS==02@$]+]_——=UEo?oqHsS) 
a ee es ee ee es | 
See aa a S S E a S E 
M eal es ee ee ee ee ee ee eee ee 


Release of flammable gas and jet fire. Possible permanent injury 

Release of flammable gas and jet fire. Limited impact due combustion gas dispersion. 

Mechanical damage of compressor and stop of production for long period + cost of repair. In early production, a spare 
is available with no loss of production. In later stage, failure will lead to half of production loss. 


The necessary valves for ESD3 safe activation are: 
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ICARO SIL Allocation (LOPA methodology) 


| Interlock ——— ű e| VSHH101 HH Protection against high high vibration of compressor's shaft 


ENPPI 
QASR Compression project 


Initiation 
likelihood Event 


(occ./year) likelihood 
Excessive vibration leading Condition for 


to mechanical damage of 
compressor's shaft. 


vibration (surge, 
liquid carry over, 
overspeed) 


GC (SD a a 
Le a a E E a E S E 
O E C a E ee ee E 
= == ee E 


Damage to compressor internals leading to gas release to atmospher through secondary vent 
Significant leakage of flammable gas and fire. Dispersion of combustion fumes. 


Mechanical damage of compressor and stop of production for long period + cost of repair. In early production, a spare 
is avalable with no loss of production. In later stage, failure will lead to half of production loss. 


Compressor anti surge controller 


7 {Availability of compressor alarm (low pressure, high level) / several vibration alarms inside compressor package. 


Availability of compressor trips (low low pressure, high high level, vibration trip in the compressor package) 


Action The necessary actions for QA-K-8001A shut down are: 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


| Interlock —— űëe| LIT109 LL Protection against low low level in compressor QA-K-8001A casing 


QASR Compression project 


Impact event description ; Initiation 

likelihood Event 
(occ./year) likelihood 

Emptying of compressor QA- Failure open of 

K-8001A casing leading to 

more pressure to closed 

drain drum (#22), and 

release of flammable gas to 

cold vent stack 


a CS CC CC ee 
[Ls a i a E E S E E E 
O aa (|) 
= = a a 


NOTES 


H |Release of gas and fire from cold vent stack. Minor impact to operators since the fire is located inside a fenced area 


(normally unmanned) 
E |Release of gas and fire from cold vent stack. Limited impact; Dispersion of combustion fumes in case of fire 


> 


Loss of product, limited value. No effects to equpiment is expected in case of fire. 
Maximum gas blow by from compressor casing will not cause overpressurization of QA-V-8008 


A| 
| 6 
EA 
a 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| LIT110 HH Protection against high high level in compressor QA-K-8001A casing 


Impact event description F Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overfilling of compressor i 0,10 
QA-K-8001A casing leading 

to potential mechanical 

damage to compressor 


Spurious closure | ee 
ESDV109 


ee se a Te 
CC A CC e 
A a E a E E E E E A 


ee ee ee ee ee a ee eee ee 
= aie E ee ee eee eee eee eee eee ee 


NOTES 


Damage to compressor internals leading to gas release to atmospher through secondary vent 


Damage to compressor internals leading to gas release to atmospher through secondary vent 


A {Mechanical damage of compressor and stop of production for long period + cost of repair. In early production, a spare 
is avalable wie no re of production. In later stage, failure will lead to half of production loss. Damage is assumed to 


over in suction line case. 


Event is expected only during startup or pressurized shutdown. 


ESDV is equipped with limit switches with alarm in control room 

| 8 | Presence of compressor casing to reduce impact to people 

| 9 |H High high vibration to shut down the compressor 
al 
al S SO 


The necessary actions for QA-K-8001A shut down are: 


\\13182I_LOPA_ENPPI_rev01_build10 sh. 14/78 LIT110HH 


ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| TIT111 HH Protection against high high temperature in discharge line from compressor casing (closed drain) 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate} SIF integritiy 
likelihood il el ae (health) Event 
(occ./year) likelihood 
1,00 1,00 0,10 


Overheating of 0,10 1,00 1,00 
compressor's casing 
draining line leading to 
More Temperature to 
Closed Drain and possible 
overheating. 
Po T T S T e 


ees eee eee eee ee eee eee ee ae eee ee e 
E a A T (D(C 
E cc | ee 
= cool ca ee ee eee eee ee 


Release of flammable gas and jet fire. Possible permanent injury 
Release of flammable gas and jet fire. Limited impact due combustion gas dispersion. 
Mechanical damage of closed drain drain circuit. Need to repair. Damage of closed drain pump. 


Design temperature of Closed Drain circuit QA-V-8008 is below the design temperature of the compressor QA-K- 
8001A/B/C/D 


The necessary actions for QA-K-8001A shut down are: 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| TIT110 HH Protection against high high temperature in compressor QA-K-8001A bearings 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overheating to compressor Temperature More 0,10 1,00 1,00 
bearing leading to in compressor QA-K- 
compressor damage 8001A bearing due 

to loss of lube oil 


ee ee ee cc 
a eS eee eee eee eee a CO eee 
A a A E a E E E E E 


E n a a | ee 
= cl ee ee ee ee eee eee eee ee 


Limited damage with possible reduced loss of containment. Potential for injuries. 

Limited damage with possible reduced loss of containment. Limited impact to environment. 
Mechanical damage of compressor and stop of production for short period + cost of repair. In early production, a spare 
is avalable with no loss of production. In later stage, failure will lead to half of production loss (5-7 days) 


The necessary actions for QA-K-8001A shut down are: 
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ICARO SIL Allocation (LOPA methodology) 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Increased gas subcooling 0,10 0,25 1,00 1,00 1,00 0,10 
leading to increased putting to maximum 
condensate production and speed QA-E-8001A 
possible hydrate formation 
aim 


Low flow of process 0,10 0,25 0,10 0,10 1,00 
gas 
a i et 


I et T) 
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NOTES 


H |Damage to compressor internals leading to gas release to atmospher through secondary vent 

E [Significant leakage of flammable gas and fire. Dispersion of combustion fumes. 

A |Mechanical damage of compressor and stop of production for long period + cost of repair. In early production, a spare 
is avalable with no loss of production. In later stage, failure will lead to half of production loss. 


The hydrate formation is expected only during the cold weather 


C107 with regulation of QA-E-8001A (b) 
ow Flow alarm on FI102 


— 


Vibration tripping the compressor 


Z 
= 
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ENPPI 
QASR Compression project 


TIT113LL 


ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


| Interlock ——— ű e| TIT108A_B_C HH Protection against high high temperature in QA-E-8001A outlet 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


More Temperature in QA-V- 
8002A (#04A) leading to 
possibile mechanical 
damage to compressor 
discharge and eventually to 
pipeline. 


a. ee a ae a ee ee A ee ee 
[ea ee ee ee ee ee ee ee ee 
ee C GS (Ee 
m sal a ee ee ee ee eee ee eee ee 


Release of flammable gas and jet fire. Possible permanent injury 

Release of flammable gas and jet fire. Limited impact due combustion gas dispersion. 
Mechanical damage of compressor and stop of production for long period + cost of repair. In early production, a spare 
is available with no loss of production. In later stage, failure will lead to half of production loss (2 days shutdown) 


The necessary actions for QA-K-8001A shut down are: 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| VSHH102A/B/C HH Protection against high high vibration of compressor's shaft 


Initiation Time risk ili iti : 
likelihood Event 
(occ./year) likelihood 


Excessive vibration leading Condition for 
to mechanical damage of air vibration 
cooler fan 


OO E A A E A 
WĀ a a ee eee ee 
a =n ce (HA (OY E E 


NOTES 


H |Damage to air cooler fan. No leakage is expected. 
E |Damage to air cooler fan. No leakage is expected. 
A |Damage to air cooler fan. No leakage is expected. Need to repair. 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood el he ae (health) Event 
(occ./year) likelihood 
1,00 1,00 0,10 


Gas blow by to the 0,10 1,00 1,00 
production separators in 
existing facilities leading to 
more pressure 
Sa ace | (Sy 


ee a a a E a a a a E 
Lee cela A (| | ee Ee 
aE ca a E S a O E e E 
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NOTES 


No mechanical damage is expected. No impact to persons. 
E No mechanical damage is expected. No impact to environment. 
A |Process upset in existing facility with possible unit shut down for a short period. 
No mechanical damage is expected since down stream existing facilities design pressure is same as compressor 


pressure. 
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PIPER 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
1,00 1,00 0,10 


Overfilling of QA-V-8002A Spurious closure of 0,05 1,00 1,00 
leading to liquid carry over ESDV 104 

to main compressor unit 

discharge header and to 

existing export pipeline with 

possible hammering. 

Potential for limited 

damage due to hammering / 

corrosion 


Failure close of LV 0,10 1,00 1,00 0,10 1,00 


Manual valves in 0,05 1,00 1,00 0,10 1,00 1,00 
the condensate 
outlet line of QA-V- 
8001A closed due to 
misoperation 


Spurious closure of 

ESDV017, ESDVO18, 

ESDV019, ESDVO20, 
ESDV021 in the 
existing facility 


SS a SC e 
E a h (| ee 
a a A S E E e e a E 
M e e ee es E es 


LIC 105 with high level alarm/ LV105 is equipped with limit switches (with alarm in DCS) 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
0,10 1,00 1,00 


Possible gas hammering in 0,05 1,00 1,00 
down stream piping leading 
to potential mechanical start up due to 
damage. Limited leakage misoperation. 
and fire. 
ee EOE eS SS ee Se Te rr a 


a CC CS eS CC CC 
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NOTES 


Limited leakage leading to fire. Possible for permenant injury. 
Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of compressor circuit. Two days complete shutdown plus repairing of weak points (9 MS) 


Active only during start up 


ESDV 031A is equipped with limit switches with alarm in DCS 


2l S OE 
3l S OE 
| 4 [Active only during startup S OE 
Gl COCO 
6l S fk 
|7 |ESDV 031A is equipped with limit switches with alarmin DCS _ oS ë O 
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of S OE 
aJ S OE 
Ee o ñek 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
0,10 1,00 1,00 


Possible gas hammering in 0,05 1,00 1,00 
down stream piping leading 
to potential mechanical start up due to 
damage. Limited leakage misoperation. 
and fire. 
ee EOE eS SS ee Se Te rr a 


CC CS OC CC 
mie, ca (| E 
a) eee a a a eS | ee Eee 
= = ee ee ee ee ee ee ee ee 


NOTES 


Limited leakage leading to fire. Possible for permenant injury. 
Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of compressor circuit. Two days complete shutdown plus repairing of weak points (9 MS) 


Active only during start up 


ESDV 031A is equipped with limit switches with alarm in DCS 


2l S OE 
3l S OE 
| 4 [Active only during startup S OE 
Gl COCO 
6l S fk 
|7 |ESDV 031A is equipped with limit switches with alarmin DCS _ oS ë O 
Bl o OE 
ol o OE 
of S OE 
aJ S OE 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| LITO11A LL Protection against low low level in Closed Drains Drum QA-V-8008 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood el he ae (health) Event 
(occ./year) likelihood 
1,00 1,00 0,10 


Possible cavitation of QA-P- 0,10 0,10 1,00 
8006A/B and QA-P-8007A/B putting in operation 
leading to mechanical QA-P-8007A/B 
damage 
BA Ee (| (| 


CO CC A CC CC 
SS ce A | (TC Oc 
ie cc A (| 
= a eS er es 


NOTES 


Possible limited leakage of flammable substance from pump seal and fire. Possible injury 
Possible limited leakage of flammable substance and fire. Minor effects 
A |Possible damage and cost of repair. Availabily of spare pump. 


7 


10 


A 
6 
7 
| 8 | 
| 9 | 
| 10 | 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate} SIF integritiy 
likelihood Event 
(occ./year) likelihood 


1,00 
,00 


Pump QA-P-8007A/B Blockage of pump 0,10 1,00 
cavitation leading to QA-P-8007A/B 
possible mechanical suction strainer 

,00 


0,01 1 1 


CO (SY 
Le a S a S E S E a E 
O E a O S ee ee es ee E 
= == ee 


Possible limited leakage of flammable substance from pump seal and fire. Possible injury 
Possible limited leakage of flammable substance and fire. Minor effects 
Possible damage and cost of repair. Availabily of spare pump. 


ase (b) - Refer to LITO11LL analysis 
ase (b) - for Demand rate refer to LITO11LL analysis 


O 


FZA-020A/B low low flow interlock to stop the pump QA-P-8007A/B 


= 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


| Interlock ——— ű e| PIT929A/B HH Protection against high high pressure in QA-P-8007 A/B discharge 


QASR Compression project 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood hae (health) Event 
(occ./year) likelihood 
1,00 


Increase of pressure up to Spurious closure of 0,10 0,10 1,00 
pump shut-off leading to ESDV-008 
piping mechanical damage 


Spurious closure of 0,10 1,00 0,10 1,00 
XV-031A/B in pump 
discharge line 


Spurious closure of 

ESDV017, ESDV018, 

ESDV019, ESDVO20, 
ESDV021 in the 
existing facility 
(refer to #04A) 


a DD a e 
a ee ee a ee es ee ie ee 
ee ee ee ee ee ee ee ee eee eee 
= a a a ee a] 


NOTES 


Mechanical damage of pump discharge line with release and fire. Possible fatality. 


E |Mechanical damage of pump discharge line with dispersion of combustion fumes. 
A |Possible damage of closed drain system with stop of production for long period + cost of repair. 


Minimum flow line managed by control loop 
PSV-930A/B designed for blocked outlet case 


\\131821_LOPA_ENPPI_revO1_build10 sh. 27/78 PIT929A_BHH 


ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| LITOO1 LL Protection against low low level in existing Closed Drain QA-T-3002 


Impact event description | Impact level | TMEL (occ./year) Initiation 
moa likelihood Event 
(occ./year) likelihood 
Possible cavitation of QA- Prolonged 
PM-3016 leading to operation of QA-PM 
mechanical damage 3016 due to 
misoperation 


CW E E A S E E ed 


Pe E E A A S E 
a ee ee ee eae e e e e ae a 
a E E a a a E es ee 


Maw a a (a 
= = MEEA ee ee a 


NOTES 


No damage is expected 
E |No damage is expected 


A [Possible damage and cost of repair. Shut down of existing unit.(1 day) 


7 {Indication of status of pump QA-PM-3016 


Possibility to have a safe escape due to noise before pump damage. 


E 
A 
Ca 
AS 
Ee S OE 
ed 
ST o OE 
6l S OE 
|7 |Indication of status of pump QA-PM-3016 __ _ S ë OE 
ee Or 
| 9 [Possibility to have a safe escape due to noise before pump damage. iü üůġúůO 
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aJ S OE 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| LITOO4 LL Protection against low low level in existing Closed Drain QA-T-4002 


Impact event description | Impact level | TMEL (occ./year) Initiation 
ype likelihood Event 
(occ./year) likelihood 
Possible cavitation of QA- Prolonged 
PM-4016 leading to operation of QA-PM 
mechanical damage 4016 due to 
misoperation 


Le ee a ed 


Pe E E A A S E 
a ee ee ee eae e e e e ae a 
OENE a E E a E a E es E 


Maw a a (a 
= = E a a 


NOTES 


No damage is expected 
E |No damage is expected 


A [Possible damage and cost of repair. Shut down of existing unit.(1 day) 


7 {Indication of status of pump QA-PM-3016 


Possibility to have a safe escape due to noise before pump damage. 


E 
A 
Ca 
AS 
Ee S OE 
ed 
ST o OE 
6l S OE 
|7 |Indication of status of pump QA-PM-3016 __ _ S ë OE 
ee Or 
| 9 [Possibility to have a safe escape due to noise before pump damage. iü üůġúůO 
aaa 
aJ S OE 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
0,10 1,00 1,00 


Possible hammering in 0,05 1,00 1,00 
down stream piping leading ESDV 034A/35A 
to potential mechanical during start up due 
damage. Limited leakage to misoperation. 
and fire. 
A o A | «|e e (S|) rr a 


a CC CS eS CC CC 
a a a ee es ee ee 
a) eee a a S| a ees ee 
= = ee ee ee ee ee ee ee ee 


NOTES 


Limited leakage leading to fire. Possible for permenant injury. 
Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of compressor circuit. Two days complete shutdown plus repairing of weak points (9 MS) 


Active only during start up 


ESDV 034A _35A is equipped with limit switches with alarm in DCS 


2l S Oek 
3l S OE 
Aal OE 
| 5 |Active only during startup S OE 
6l fk 
|7 |ESDV 034A_35A is equipped with limit switches withalarminDCS SS ë O 
Bl o OE 
ol S OE 
of S OE 
aJ S OE 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
0,10 1,00 1,00 


Possible hammering in 0,05 1,00 1,00 
down stream piping leading ESDV 036A/37A 
to potential mechanical during start up due 
damage. Limited leakage to misoperation. 
and fire. 
A o A | «|e e (S|) rr a 


a CC CS eS CC CC 
a a a ee es ee ee 
a) eee a a S| a ees ee 
= = ee ee ee ee ee ee ee ee 


NOTES 


Limited leakage leading to fire. Possible for permenant injury. 
Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of compressor circuit. Two days complete shutdown plus repairing of weak points (9 MS) 


Active only during start up 
ESDV 036_37A is equipped with limit switches with alarm in DCS 


Assumed that 1/10 of times, the damage effectively occurs. 


2l S Oek 
B3 o OE 
Aal Oek 
| 5 |Active only during startup S OE 
6l fk 
|7 |ESDV 036_37A is equipped with limit switches with alarminDCS SS ë O 
Bl Soe eee es CO OE 
| 9 |Assumed that 1/10 of times, the damage effectively occurs. SS å O 
Ee 
pa 
2) o ñE 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


| Interlock ——— ű e| PIT924 HH Protection against high high pressure in condensate header to QA-V-8005A 


QASR Compression project 


Impact event description Initiation 
likelihood Event 
(occ./year) likelihood 
Overpressurization of 
condensate suction header upstream existing 
leading to mechanical facility 


a SC CC SC CC e 
SS a A (CS E E S E 
Maw cc A es A E 
= = e e TT 


NOTES 


H Significant leakage from main header leading to possible jet fire.possible to one fatality. 
E {Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of condensate suction header and stop of production for one day + cost of repair. 


High pressure alarm in suction header 


PSVOO6A in condensate header 


H 
E 
6 
Ea 
| 9 | 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| PITO76A_B_CHH Protection against high high pressure in condensate header to QA-V-8005A 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate} SIF integritiy 
likelihood el el ae (health) Event 
(occ./year) likelihood 
1,00 0,10 0,10 


Gas blow by from QA-V- 0,10 1,00 1,00 
8005A/B leading to 
overpressurization of 
degasser QA-V-4005 leading 
to mechanical damage. 
booo SO (| || | 


a CC CC 
i cc (D(C 
E ca EE | ee 
= cl ee ee eee eee eee ee 


NOTES 


Mechanical damage leading to significant gas leakage and fire. Possible fatality 
Significant leakage leading to fire; potential for combustion fumes dispersion due to fire 
A {Possible damage of degaser leading to loss of production (by half) plus cost of repair 


3 efer to LITO21A/B analysis 
4 


ejeļe 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


LITOO2A/3A LL Protection against low low level in condensate suction drum QA-V-8005A 
LITOO2A/3A LL 


P&ID 12250-54 Final elements ESDV001A/B (C) and 
QA-P-8003A/B/C (T) 


Impact event description Initiation 
likelihood Event 
(occ./year) likelihood 
Pump QA-P-8003A/B/C dry 
running leading to setting at maximum 
cavitation and possible speed of pump QA- 
mechanical damage. P-8003A/B/C 


a CC CC 
a SS | a E 
Re ca S S E E O a a 
= aid ee ee ee ee es ee ee ee ee 


NOTES 


Possible limited leakage of flammable substance from pump seal and fire. Possible injury 
Possible limited leakage of flammable substance and fire. Minor effects 
Possible damage of two pumps (third pump is spare) and cost of repair. Spare pump. Possible reduction of 


production.(by half) in first period ,three pumps will be running and consequence will be total loss of production for two 
days. 


Low low flow interlock FZA-019A/B/C to stop the pump QA-P-8003A/B/C 
ndication of status of pump QA-P-3003A/B/C 


Possibility to have a safe escape due to noise before pump damage. 


2 o OE 
Bel i e 
Aal i OE 
Sl S OE 
|6 |low low flow interlock FZA-019A/B/C to stop the pumpQA-P-8003A/B/C i i üůúůO 
Bl i OE 
|9 [Possibility to have a safe escape due to noise before pump damage. U i üůüúůO 
oJ S OE 
aJ S OE 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


| Interlock ——— ű e| LIT002B8/3B HH Protection against high high level in condensate suction drum QA-V-8005A/B 


| 
= 


QASR Compression project 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overfilling of QA-V-8005A i 0,05 1,00 1,00 0,10 1,00 1,00 

leading to condensate carry- - 

over to Fuel gas circuit 

(#13) and More Pressure in 

QA-V-8005A. Condensate 

carry-over to compressor 

QA-K-8003A with possible 

mechanical damage 

: Lo oe | Le | | [ae | ew Lo! 

ns 
FE 


oe 


stopping pump QA- 
P-8003A/B/C 


ems st E E POE 
a a E es ee 
La cal a a e E S a E E a E 


NOTES 


H |Damage to Flash gas compressor with limited release. Possible fire and injuries. 

E |Damage to Flash gas compressor with limited release. Limited dispersion in atmosphere 
Damage to flash gas compressor, need for repair and limited loss of production. Spare flash gas compressor.in case of 
liquid carry over to flare header , possibility of total plant shutdown. 


ZA-011A low low flow activate the stand-by pump 
igh Level alarm in LIC-001A_B/ Indication of pump status in DCS 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| PIT002A/B HH Protection against high high pressure in condensate suction drum A/B 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood S ae (health) Event 
(occ./year) likelihood 
Overpressurization of QA-V- 0,02 1,00 0,10 1,00 1,00 0,01 
8005A and mechanical 
damage. 


Spurious closure of 1,00 1,00 0,01 
ESDV012A 


a DC CC OC e 
= acl, (A me | a R 
Ce ee ee a S S a a E a E 
= = ee ee a ee ee ee ee eee 


Mechanical damage and release. Possible for fire. Possible for one fatalities since the condensate drum is installed 9 
Mechanical damage and release. Localized impact to environment 
A |Mechanical damage of QA-V-8005A + cost of repair. Availability of spare suction condensate drum QA-V-8005B, which 
assumed to be involved in fire . Potential for damage to plant and prolonged shut down. 


ef eee 


Refer to LITOO2BHH analysis. 


al demand rate is the calculate intermediate likelihood of more level in QA-V-8005A (refer to LITOO2HH analysis). 


S O 


K High high level trip. 


7 |High pressure alarm in PIC003 
| 9 [PSV007A/B in QA-V-8005A/B sized for this case. PSV006A/B in condensate line from existing facility 
Ee o O 
AA 
2l o O 


ha O O 
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ICARO SIL Allocation (LOPA methodology) 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Possbile condensate carry 
over (flashing) to the 
degasser leading to Pressure 
More in the Degasser and 
possible mechanical 
damage. More Flow of gas 
to cold vent. Possible fire. 


See ee eee) SESS EES ESS aaa eat ees) 
SS a E E S O a E 
a eo | 
Ld D M a a e a a a a 


Mechanical damage leading to significant gas leakage and fire. Possible fatality 
Significant leakage leading to fire; potential for combustion fumes dispersion due to fire 
Possible damage of degaser leading to loss of production (by half) plus cost of repair 


Install a limit switch in LVO16A with alarm in control room in order to provide additional 
alarm and reduce the SIL level by one. 
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ENPPI 
QASR Compression project 


LITO21A_BLL 


ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| VSHH102A/B/C HH Protection against high high vibration of compressor's shaft 


Initiation Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood Event 
(occ./year) likelihood 
Excessive vibration leading Condition for 
to mechanical damage of vibration 
pump QA-V-8003A/B/C 


ear mes E E A A CCC 
ee ee ee ee ee ee eee ee eee ee 
SS =n e T T ee 


Possible limited leakage of flammable substance from pump seal and fire. Possible injury 
Possible limited leakage of flammable substance and fire. Minor effects 
ossible damage and cost of repair. Availabily of spare pump. 


The necessary actions for QA-K-8001A shut down are: 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 0,10 0,10 


Increase of pressure up to Spurious closure of 0,05 1,00 0,01 
pump shut-off leading to ESDV-014 

piping mechanical damage 

and release of flammable 

substance. 


Spurious closure of 0,05 1,00 1,00 0,01 
XV-027A/B/C in 
pump discharge line 


eS Ss es ee es ee ee ee 
P a (OO S E 
E E E a ee es ee ee ee 
La = ea E a a A E a a 


NOTES 


H Significant leakage and fire. Possibility of multiple fatalities 

E |Significant leakage and fire. Dispersion of combustion fumes 

A {Possible damage of two pumps (third pump is spare) and cost of repair. Spare pump. Possible reduction of 
production.(by half) in first period ,three pumps will be running and consequence will be total loss of production for two 
days. 


Minimum flow line regulated by FICO01A/B/C 


7 |Low flow alarm and trip FZA019A/B/C 


PSV-093A/B/C designed for blocked outlet case / Low low flow interlock FZA-019A/B/C to stop the pump QA-P- 
8003A/B/C 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 1,00 0,10 


Pump QA-P-8003A/B/C Spurious closure of 
cavitation/blocked outlet ESDV-001A 


Spurious closure of 0,10 
ESDV-014 
0,10 


QASR Compression project 


leading to possible 
mechanical damage 


Spurious closure of 
XV-027A/B/C in 
pump discharge line 


Failure of LIC-001A 
setting at maximum 
speed of pump QA- 

P-8003A/B/C 


a ee | | (ea a a Ce (es) 
es a ae ee es es ee ee 
fee a ee | S 
x = | S S 


NOTES 


Possible limited leakage of flammable substance from pump seal and fire. Possible injury 
Possible limited leakage of flammable substance and fire. Minor effects 
Possible damage and cost of repair. Availabily of spare pump. 


ESDVs valves provided with limit switches and alarms / Indication of status of pump QA-P-3003A/B/C 


P 


ossibility to have a safe escape due to noise before pump damage. 
ibration trip / high pressure trip in discharge 


< 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| PITO062 HH Protection against high high pressure in HP/LP interface with flash gas compressors 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
1,00 0,10 0,10 


Back flow of process gas 0,10 1,00 0,01 

from QA-K-8001A suction to 

QA-K-8003A leading to 

Pressure More and 

mechanical damage 
Toe ee ee SO Oe ee oe ees 


a a a |. |e a ee ee) NE (ee) (| Cn FS (eT 
EE E e ee E ee ee 
ee a (ee 
Lf eal a ee ee ee ee ee 


Release of flammable gas and fire. Possible fatality. 
Release of flammable gas and fire. Dispersion of combustion fumes 
Damage to compressor. Cost of repair. Limited production losses due to availability of spare compressor. 
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ENPPI 


SIL Allocation (LOPA methodology) 
QASR Compression project 


ICARO 


Initiation Time risk Vulnerability | Additional |Intermediate} SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
Compressor QA-K-8003A 0,10 1,00 0,10 0,10 1,00 1,00 
surge 
a RQ OQ (QQ 


aa cc A (| 
La] = cs A (SC (CA 


Damage to compressor internals leading to possible limited gas release to atmosphere and jet fire 

Significant leakage of flammable gas and fire. Dispersion of combustion fumes.In caseof damage of spare compressor 
Damage to compressor. Cost of repair. Limited production losses due to availability of spare compressor.In caseof 
damage of spare compressor due to fire, possible increase of flaring. 


VT001A/B high high vibration trip 
Low flow alarm on FIO03A, Low pressure alarm on PIO70A 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


| Interlock ——— ű e| PIT021A/B HH Protection against high high pressure in QA-K-8003A/B discharge 


Impact event description F Initiation Time risk BPCS Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overpressurization of 

Compressor QA-K-8003A ESDV013A/B in 
discharge line leading to discharge line of QA 
mechanical damage. K-8003A/B 


ESS SS SE TTY” oxo SSS eS SSS SSS SS _]2]x">—>—wsS=|—>{10”7@—s]$]*“{x17]$]$$]]$]$$}]= 
E a A S A A a 
See aa A a e a S E 
M eal a EP a E S E 


NOTES 


Release of flammable gas and fire. Possible one fatality. 

Release of flammable gas and fire. Dispersion of combustion fumes 

Damage to compressor. Cost of repair. Limited production losses due to availability of spare compressor. 
1 


ee S OE 
Pe 
a 


A 
fed ee 
| 8 | 


| 9 | PSV-022A sized for blocked discharge. 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| TIT004A/B HH Protection against high high temperature in QA-K-8003A/B outlet 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Increase of compressor rate 
leading to overheating of 
discharge line. Possible 
mechanical damage and 


a ee | ee ee (ee FE (| 
a cece E E E E S 
E cr a a a A a E 
EE = a S a | a E 


Possibility of release of flammable gas. Potential for injury 
Limited impact due to combustion fumes dispersion 
Damage to compressor. Cost of repair. Limited production losses due to availability of spare compressor. 


A 
Ee o OE 
Aal OE 
Sl S OE 
| 6 |Hightemperature alarm on TIOO3A_ _ S OE 
aS S OE 
Bl o OE 
ol S OE 
of S OE 
af- o OE 
LE o ñE 


The necessary actions for QA-K-8001A shut down are: 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


| Interlock ——— ű e| TITOO2A/B HH Protection against high high temperature in compressor QA-K-8003A/B bearings 


Impact event description F Initiation Time risk BPCS Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overheating to compressor 

bearing leading to in compressor QA-K- 
compressor QA-K-8003A/B 8003A/B bearing 
damage due to loss of lube 


a DC CS OS CC e 
i aa (D(C, 
E cc | ee E; 
= cl a E es ee ee ee 


NOTES 


The SIF shall be analysed with flash gas compressor vendor 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| VSHH001A/B HH Protection against high high vibration of compressor's shaft QA-K-8003A/B 


Initiation Time risk ili iti : 
likelihood Event 
(occ./year) likelihood 


Excessive vibration leading Condition for 
to mechanical damage of vibration (surge, 
compressor's shaft. liquid carry over) 


a Oc E A A E A 
W a eee ee 
a e eT Ts 


The SIF shall be analysed with flash gas compressor vendor 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
0,10 1,00 1,00 


Possible gas hammering in 0,05 1,00 1,00 
down stream piping leading 
to potential mechanical start up due to 
damage. Limited leakage misoperation. 
and fire. 
ee EOE eS SS ee Se Te rr a 


a CC CS eS CC CC 
a a a ee es ee ee 
a) eee a a S| a ees ee 
= = ee ee ee ee ee ee ee ee 


NOTES 


Limited leakage leading to fire. Possible for permenant injury. 
Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of fuel gas circuit. Two days complete shutdown plus repairing of weak points (9 MS) 


Active only during start up 


ESDV 002A is equipped with limit switches with alarm in DCS 


ee U 
3l o Ofk 
Aal OE 
| 5 ļActive only during startup S OE 
i S Ofk 
|7 |ESDV 002A is equipped with limit switches with alarmin DCS S ë O 
Bl i OE 
ol i OE 
of S OE 
aJ S OE 
Ee o ñE 


= 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
0,10 1,00 1,00 


Possible gas hammering in 0,05 1,00 1,00 
down stream piping leading 
to potential mechanical start up due to 
damage. Limited leakage misoperation. 
and fire. 
ee EOE eS SS ee Se Te rr a 


a CC CS eS CC CC 
a a a ee es ee ee 
a) eee a a S| a ees ee 
= = ee ee ee ee ee ee ee ee 


NOTES 


Limited leakage leading to fire. Possible for permenant injury. 
Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of fuel gas circuit. Two days complete shutdown plus repairing of weak points (9 MS) 


Active only during start up 
ESDV 004A is equipped with limit switches with alarm in DCS 


Assumed that 1/10 of times, the damage effectively occurs. 


ee ee 
Ee o Ek 
Aal OE 
| 5 |Active only during startup S OE 
6l S Ek 
|7 |ESDV 004A is equipped with limit switches with alarminDcs o ë O 
Bl i OE 
|9 |Assumed that 1/10 of times, the damage effectively occurs. SS ü O 
o, S OE 
aJ S OE 
Ee o ñE 


= 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


Impact event description F Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Possible gas hammering in 

down stream piping leading 

to potential mechanical start up due to 
damage. Limited leakage misoperation. 
and fire. 


a CC CS eS CC CC 
a a a ee es ee ee 
a) eee a a S| a ees ee 
= = ee ee ee ee ee ee ee ee 


Limited leakage leading to fire. Possible for permenant injury. 
Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of fuel gas circuit. Two days complete shutdown plus repairing of weak points (9 MS) 


Ee U 
3l i OE 
Aal OE 


Active only during start up 
ESDV 010A is equipped with limit switches with alarm in DCS 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


Impact event description F Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Possible gas hammering in 

down stream piping leading 

to potential mechanical start up due to 
damage. Limited leakage misoperation. 
and fire. 


a CC CS eS CC CC 
a a a ee es ee ee 
a) eee a a S| a ees ee 
= = ee ee ee ee ee ee ee ee 


Limited leakage leading to fire. Possible for permenant injury. 
Limited leakage leading to fire; potential for combustion fumes dispersion due to fire 
Mechanical damage of fuel gas circuit. Two days complete shutdown plus repairing of weak points (9 MS) 


Ee U 
3l i OE 
Aal OE 


Active only during start up 
ESDV 028A is equipped with limit switches with alarm in DCS 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood il he ae (health) Event 
(occ./year) likelihood 
1,00 1,00 1,00 


Overheating of QA-E-8002 0,10 1,00 0,01 
leading to mechanical putting to maximum 
damage power QA-E-8002 


Spurious closure of 0,05 1,00 0,10 0,10 1,00 0,01 
ESDV002A in inlet 
line of QA-E-8002 


SC CC eS OC CC 
A a a ee ee eee 
a) eee ee a (S| ees Eee) 
= = a es 


Possibility of release of flammable gas. Potential for injury 
Limited impact due to combustion fumes dispersion 
Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. 


2l S Ofk 
EE 
Aal i fk 
GOl i 


TZA007 high high temperature interlock to shut down electrical heating on QA-E-8002 (classified as SIL2) / FZA026B LL 
to shutdown electrical heating on QA-E-8002. 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood el he ae (health) Event 
(occ./year) likelihood 
1,00 1,00 1,00 


Overheating of QA-E-8002 0,10 1,00 0,10 
leading to mechanical putting to maximum 
damage power QA-E-8002 


Spurious closure of 0,05 1,00 0,10 0,10 1,00 0,10 
ESDV002A in inlet 
line of QA-E-8002 


SS sg eee eee ee ee ee Ey, es 
(ae ee es ee ee ee eee ee 
ee a A E E E a a O E 
m = a (FR S E 


Possibility of release of flammable gas. Potential for injury 
Limited impact due to combustion fumes dispersion 
Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Initiation Time risk BPCS Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overheating of QA-E-8002 
leading to mechanical 
damage 


a a | ee ee (A Fe [| 
Pre ee ee ee ee eee eee eee eee eee 
ee ce a AS a a E 
= = a | ee E 


NOTES 


Possibility of release of flammable gas. Potential for injury 
Limited impact due to combustion fumes dispersion 
A |Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. 


a E E 
Aal i OE 


5S 
| 6 [TDICO08 with regulation of QA-E-8002 

a 
| 9 [TZA005 high high temperature interlock to shut down electrical heating on QA-E-8002 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| TIT011A/B HH Protection against high high temperature in QA-E-8003A/B outlet 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood S ae (health) Event 
(occ./year) likelihood 
1,00 1,00 1,00 


Overheating of QA-E- Failure of 0,10 1,00 0,01 
8003A/B leading to TDIC012A/B putting 
mechanical damage to maximum power 

QA-E-8003A/B 


Spurious closure of 0,05 1,00 0,10 0,10 1,00 0,01 
ESDVOO4A in inlet 
line of QA-E- 
8003A/B 


i a ee ee o o es 
pE E e | (es ey) es ee ee 


Le! canal er 


Possibility of release of flammable gas. Potential for injury 
Limited impact due to combustion fumes dispersion 
Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. 


2l S OE 
OOO es 
Aal i OE 
E 

E a a a 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| TITOO9A/B HH Protection against high high temperature in QA-E-8003A/B outlet 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 1,00 1,00 


Overheating of QA-E- Failure of 0,10 1,00 0,10 
8003A/B leading to TDICO12A/B putting 
mechanical damage to maximum power 

QA-E-8003A/B 


Spurious closure of 0,05 1,00 0,10 0,10 1,00 0,10 
ESDVOO4A in inlet 
line of QA-E- 
8003A/B 


SS eg ee a eR ee ee, I EE, E 
(ae ee ee ee ee ee eee ee 
ee a A E E E a a S E 
m = a (FR S E 


Possibility of release of flammable gas. Potential for injury 
Limited impact due to combustion fumes dispersion 
Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overheating of QA-E-8002 

leading to mechanical 

damage line of QA-E- 
8003A/B 


a a | ee ee (A Fe [| 
Pre ee ee ee ee eee eee eee eee eee 
ee ce a AS a a E 
= = a | ee E 


NOTES 


Possibility of release of flammable gas. Potential for injury 
Limited impact due to combustion fumes dispersion 
A |Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. 


a 
aaa 
Assumed for no flow the failure of two possible ESDV 


5S 
| 6 |TDICO12A/B with regulation of QA-E-8003A/B 

a 
| 9 |TZA011A/B high high temperature interlock to shut down electrical heating on QA-E-8003A/B 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| LITOOS LL Protection against low low level in QA-V-8006 A leading to gas blow by to QA-V-8008 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood el he ae (health) Event 
(occ./year) likelihood 
1,00 1,00 0,10 


Gas blow by to the Closed 0,10 1,00 1,00 
Drain drum QA-V-8008 
(#21) leading to More 
Pressure in QA-V-8008 and 
more gas to cold vent; 
possible ignition. 
QO (OO a ee cae 


a CC CS CC CC 
a e A ES | E 
LE cc SS Se a ee ee 
= cea e (| 


NOTES 


H |Release of flammable gas through cold vent. Possible fire. Minor impact to operators since the fire is located inside a 
fenced area (normally unmanned) 


E {Limited impact; Dispersion of combustion fumes in case of fire 
A |Limited impact ,possible repair of flame arrestor and cold vent piping ,complete plant shutdown for 1 day for 
maintenance plus the cost of repair. 


Overpressure case is not expected due to proper design of cold vent (Refer to HAZOP action #70) 


LV106 is equipped with limit switches with alarm 


ray 
N 


eje 


= 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


| TOOSHH | HH | esignintent — — — | Intent Protection against low low level in QA-V-8006 A leading to gas blow by to QA-V-8008 


e HH ES 12305 Final elements ESDVs in fuel gas inlet 
(C&ED 13/18) 


Impact event description ; Initiation Time risk BPCS Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overfilling of QA-V-8006 
leading to liquid carry over 
to QA-E-8005A/B with 
possible damage to 
heatesr/burners of turbine 


SS SS ae |) |e) (ee a e (| a a E 
ed cc a (CO T E 
eee eee E E a E a a S 
= ca Ce ae ee ee ee ee 


Possible damage of QA-E-8005A/B and to gas turbine burners; no leakage is expected. 

Possible damage of QA-E-8005A/B and to gas turbine burners; no leakage is expected. 

Possible damage of QA-E-8005A/B and to gas turbine burners; availability of spare QA-E-8005A/B. Possibile short term 
shut down for entire plant for one day. 
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ICARO SIL Allocation (LOPA methodology) 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overheating of QA-E- Failure close of 0,10 1,00 0,10 1,00 1,00 0,10 
8005A/B leading to PV043A in inlet line 
mechanical damage of fuel gas 
Py 


Blockage of QA-S- 0,10 1,00 0,10 0,10 1,00 
8001A/B 
C a || (ON (P| (OO (CD SO | 


= 8 ee SS SS SS SSS See 
[a a a ee es ee ee | 
a a a E S A E a S E 
E aa a a | [| ee 


Possibility of release of flammable gas. Potential for injury 
Limited impact due to combustion fumes dispersion 
Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. Spare heater 
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ENPPI 
QASR Compression project 


FITOO4LL 


ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk Vulnerability | Additional |Intermediate} SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
1,00 0,10 1,00 


Overpressurization of QA-V- Failure open of 0,10 1,00 0,01 
8006 leading to mechanical PV043A in inlet line 
damage and release of QA-V-8006 


Failure open of 0,10 1,00 0,10 1,00 1,00 0,01 
PVOO3B in inlet line 
of QA-V-8006 


a CC CO CC 
ee eee eS E 
aa ee E E a E a E 
H = a a a a a S E 


NOTES 


Possibility of significant release of flammable gas. Potential for fatality 
Possibility of significant release of flammable gas and combustion fumes dispersion 
Mechanical damage of fuel gas circuit and stop of production for long period for all compressor train + cost of 


repair.higher consumption of Diesel fuel for excisting power generator leading to increase of cost 


PICO52 opening PV052 to flare 


PSV097A/B in inlet line of QA-V-8006 sized for control failure scenario 


Eo 
Bel i ë f 
Aal i OE 
ST S OE 
| 6 |PICOS2 openingPVOS2toflare 
Le EEE E 
EA 
|9 |PSV097A/B in inlet line of QA-V-8006 sized for control failure scenario S ü O 
Eo 
aJ S OE 
Ee o ñE 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Initiation Time risk BPCS Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Pressure Less in this node Failure close of 

leading to possible gas PV043A during 

turbine shut down and normal operation. 
consequent production 


eS CC CS CC CO 
a a ee E E S 
E ce a a A A a a E 
EE = A | E 


No difference between uncontrolled and controlled shut down 
No difference between uncontrolled and controlled shut down 
No difference between uncontrolled and controlled shut down 


2 S OE 
Bel i ë e 
Aal i OE 


GOl i 
a S OE 
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ICARO 


Impact event description | Impact level | TMEL (occ./year) 


Increase of pressure in 
existing power generator 
leading to unexpected 
complete shut down of site 
(gas plant and oil plant) 


CC CC A CC e 
ee ee Ses 
aa a A E a E S E 
H = Saacan A (CC) 


No impact on persons. 
No impact on environment 


Unexpected complete shut down of site (gas plant and oil plant) for one day. Assumed a lower impact on asset due to 


fact that there is no impact on safety and environment 


ESDV XXX is installed in line to existing power generation.(upstream PV904), Refer to HAZOP action # 54 


Team agrees in the installation of 2 oo 3 voting for the initiators of the present SIF in order 
to consider acceptable the reduction of Asset Integrity Level of the SIF from AIL3 to AIL2. 


\\13182|_LOPA_ENPPI_rev01_build10 


Initiation 
likelihood 
(occ./year) 
Failure open of 
PV904 in inlet line 
of existing power 
generation 


SIL Allocation (LOPA methodology) 


Protection against high high pressure in existing power generation 


sh. 62/78 


Event 
likelihood 


ENPPI 
QASR Compression project 


PITXXXAHH 


ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| TIT022A/B HH Protection against high high temperature in QA-E-8005A/B outlet 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 1,00 1,00 


Overheating of QA-E- Failure of 0,10 1,00 0,01 
8005A/B leading to TDICO20A/B putting 
mechanical damage to maximum power 

QA-E-8003A/B 


Failure close of 0,05 1,00 0,01 
PVO43A in inlet line 
of fuel gas 


a. a ee ee ae A ee ee A ee ee. 
[ea ee es ee ee ee ee ee ee 
ee a SS (Ee 
m sal a (| 


NOTES 


Possibility of release of flammable gas. Potential for injury 
E |Limited impact due to combustion fumes dispersion 
A |Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. 


a O 
Ee i O 
aS O 
LA EE a 
| 6 [TDIC020A/B with regulation of QA-E-8005A/B 
Oo O 


TZA019A/B high high temperature interlock to shut down electrical heating on QA-E-8005A/B (classified as SIL2) / 
FZA004 LL to shutdown electrical heating on QA-E-8005A/B. 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


| Interlock ——— ű e| TIT019A/B HH Protection against high high temperature in QA-E-8005A/B outlet 


QASR Compression project 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 


Overheating of QA-E- Failure of 

8005A/B leading to TDICO20A/B putting 

mechanical damage to maximum power 
QA-E-8003A/B 


Failure close of 
PV043A in inlet line 
of fuel gas 


a. a ee ee ae a ee ee A ee ee. 
[ea ee es ee ee ee ee ee ee 
ee aa (Ee 
m sal ee er 


NOTES 


Possibility of release of flammable gas. Potential for injury 
Limited impact due to combustion fumes dispersion 
A |Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. 


ee S OE 
Bel i ë Ef 
Aal i OE 


A a; 
| 6 [TDIC020A/B with regulation of QA-E-8005A/B 

High temperature alarm on TDICO20A/B 

| 9 |TZA022A/B high high temperature interlock to shut down electrical heating on QA-E-8005A/B 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description Initiation Time risk BPCS Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood ue (health) Event 
(occ./year) likelihood 
1,00 1,00 0,10 


1 |Temperature Less in fuel gas Failure of 0,10 1,00 1,00 
to gas turbine with possible TDICO48A/B 
condensation and excess of shutting down QA-E 
firing with mechanical 8005A/B 
damage of burners 
Ooo ee ee S e ooo i 


CC a CC a 
a a A ee ee 
ee ca a A a A S a E 
Lo = M Ee E a e E e eee ee 


NOTES 


Limited damage to turbine burners. No impact to personnel. 
Limited damage to turbine burners. No impact to environment. 
A |Possible stop of compressor trains for maintenance for 2 days. 


Co 
BA S 
Aal i OE 
GOl i 
a OE 
Bl i OE 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
LITOO8A LL Protection against low low level in QA-V-8007 A leading to gas blow by to QA-V-8008 


Impact event description | Impact level | TMEL (occ./year Initiation Time risk BPCS Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 1,00 


Gas blow by to the Closed Failure open of LV 0,10 0,10 1,00 1,00 
Drain drum QA-V-8008 

leading to More Pressure in 

QA-V-8008 and more gas to 

cold vent; possible ignition. 


SSS SS ee ee, e S e 


NOTES 


H |Release of flammable gas through cold vent. Possible fire. Minor impact to operators since the fire is located inside a 
fenced area (normally unmanned) 


E {Limited impact; Dispersion of combustion fumes in case of fire 
A |Limited impact ,possible repair of flame arrestor and cold vent piping ,complete plant shutdown for 1 day for 
maintenance plus the cost of repair. 


Overpressure case is not expected due to proper design of cold vent (Refer to HAZOP action #72) 


LV106 is equipped with limit switches with alarm 


Action N.A. 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood Event 
(occ./year) likelihood 


Less Pressure in QA-V-8007 Failure closed of 

leading to No Flow to fuel PV054B 

gas purge header and to downstream QA-E- 

existing facility 8006 in HP flare 
T 
ee 
| 


a A Oc E A A a A 
ee ee a E 
= == a ee ee es eee 


NOTES 


No flow of purge fuel gas to flare leading to possible flare flame out and eventually flash back damage the flare stack, 


possible mechanical damage leading to possible fatality. 


No flow of purge fuel gas to flare leading to possible flare flame out 
A |Potential damage to flare accessory ; Complete plant shutdown for a long while for maintenance plus the cost of repair 


w Flow alarm in FITOO7 


Alarm in main control room due to flame detector of flare stack 


B 
Ee o OE 
Aal i OE 
Sl o OE 
6l S OE 
7 |LowFlowalarminFITOO7 S OE 
| 8 | 
| 9 | 
| 10 | 
| 11 | 
| 12 | 


Verify the possibilty to provide a completely independent additional backup circuit for 
flare header/pilot purging to reduce the SIL value. 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 1,00 1,00 


Overpressurization of QA-V- Failure open of 0,10 1,00 0,01 
8006 leading to mechanical PV054B 

damage and release of downstream QA-E- 

flammable gas 8006 


Failure open of 1,00 0,01 
PVO54A in HP 


eS ee ee ee ae ee E ee 
E Cea O a U (| ee | 
D C SS (ee 
m sal ca (| 


NOTES 


H |Possibility of significant release of flammable gas. Potential for fatality 

E [Possibility of significant release of flammable gas and combustion fumes dispersion 
Mechanical damage of fuel gas circuit and stop of production for long period for all compressor train + cost of 
repair.higher consumption of Diesel fuel for excisting power generator leading to increase of cost 


PSVO55A/B in inlet line of QA-V-8007 sized for control failure scenario 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood il he ae (health) Event 
(occ./year) likelihood 
1,00 1,00 1,00 


Overheating of QA-E-8006 0,10 1,00 0,01 
leading to mechanical putting to maximum 
damage power QA-E-8006 


Spurious closure of 0,05 1,00 0,10 0,10 1,00 0,01 
ESDV025 on inlet 
line to existing 
facility when the 
line is in use 


a CC CC 
rr ee ee ee ee ee eee eee eee eee ee 
aE ccc A A Fe 


La == A | 


ossibility of release of flammable gas. Potential for injury 

imited impact due to combustion fumes dispersion 
Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. 
avaliabilty of bypass line of QA-E-8006 as per action HAZOP #72 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood il he ae (health) Event 
(occ./year) likelihood 
1,00 1,00 1,00 


Overheating of QA-E-8006 0,10 1,00 0,10 
leading to mechanical putting to maximum 
damage power QA-E-8006 


Spurious closure of 0,05 1,00 0,10 0,10 1,00 0,10 
ESDV025 on inlet 
line to existing 
facility when the 
line is in use 


a CC CC 
rr ee ee ee ee ee eee eee eee eee ee 
aE ccc A A Fe 
La = A (| 


Possibility of release of flammable gas. Potential for injury 
imited impact due to combustion fumes dispersion 
A |Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair.avaliabilty of bypass line 
of QA-E-8006 as per action HAZOP #72 


DICO35 with regulation of QA-E-8006 
igh temperature alarm on TDICO35 


TZA036 high high temperature interlock to shut down electrical heating on QA-E-8006 


ejeļe 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


FITO28 LL Protection against high high temperature in QA-E-8006 


QASR Compression project 


Initiation Time risk 
likelihood Event 
(occ./year) likelihood 


Spurious closure of 0,10 1,00 0,10 
ESDV025 on inlet 
line to existing 
facility when the 
line is in use 


a DD a a 
fs ae a ee ee E 
ee ccc E S e E a E 
EE a N e S | E 


NOTES 


Possibility of release of flammable gas. Potential for injury 

E |Limited impact due to combustion fumes dispersion 
Mechanical damage of fuel gas circuit and stop of production for short period + cost of repair. avaliabilty of bypass line 
of QA-E-8006 as per action HAZOP #72 


DICO35 with regulation of QA-E-8006 
igh temperature alarm on TDICO35 


E 


TZA036 high high temperature interlock to shut down electrical heating on QA-E-8006 


N 


E| 
ES 
8| 
EE 


\\13182I_LOPA_ENPPI_rev01_build10 sh. 71/78 FITO28LL 


ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 0,10 1,00 


Pressure Less in air Failure of PICO73 0,10 1,00 0,10 
distribution network (#08) stopping the 
leading to plant shut down compressor QA-K- 

8002A/B/C 


Failure of PICO73 0,10 1,00 0,10 1,00 1,00 0,10 
with shut down of 
QA-K-8002A/B/C 


eC CC CC CC 
a cc eC | S 
2 a a A Se es ee 
La = a ee ee a E 


Uncontrolled plant shud down leading to no impact to operators 
Uncontrolled plant shut down; potential for flaring. 
Uncontrolled plant shut down; potential for maintenance activity pre start up for 1 day (SMS) 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk BPCS Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 0,10 1,00 


Pressure Less in air Failure of PICO73 0,10 1,00 0,10 
distribution network (#08) stopping the 
leading to plant shut down compressor QA-K- 

8002A/B/C 


Failure of PICO73 0,10 1,00 0,10 1,00 1,00 0,10 
with shut down of 
QA-K-8002A/B/C 


eS CC a OC CC 
ee a T S E A a a a E 
A a E S | 
La = a a a a a es ee 


Uncontrolled plant shud down leading to no impact to operators 
Uncontrolled plant shut down; potential for flaring. 
Uncontrolled plant shut down; potential for maintenance activity pre start up 
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ICARO SIL Allocation (LOPA methodology) ENPPI 
QASR Compression project 


Impact event description | Impact level | TMEL (occ./year) Initiation 
likelihood Event 
(occ./year) likelihood 
Pressure Less in air Failure of PICO73 
distribution network (#08) stopping the 
leading to plant shut down compressor QA-K- 
8002A/B/C 
Failure of PICO73 
with shut down of 
QA-K-8002A/B/C 


a a CC a CC 
SS ee i OE a a E 
ie aa A (| 
= a ae ee ee ee ee ee ee eee ee 


NOTES 


Uncontrolled plant shud down leading to no impact to operators 
Uncontrolled plant shut down; potential for flaring. 
Uncontrolled plant shut down; potential for maintenance activity pre start up 


ee Se 
Bel i ë Ef 
a es 


E a] 
| 6 | PZA079A low low pressure with closure of ESDV038 
IS 
| 9 [PZA079A/B/C in instrument air main header with total plant shut down 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| PITO85A/B/C LL Protection of plant for low low pressure of nitrogen netwoek 


Impact event description | Impact level | TMEL (occ./year) Initiation Time risk Vulnerability | Additional |iIntermediate| SIF integritiy 
likelihood (health) Event 
(occ./year) likelihood 
1,00 1,00 1,00 


Loss of nitrogen production Failure of PICO86 1,00 0,10 
leading to no nitrogen to decreasing pressure 

seal gas compressor QA-K- of QA-A-8004 to QA 

8001A/B/C/D with possible E-8007 

damage 


Spurious opening of 1,00 0,10 
BDV-009 


ees eee eee eee ee eee eee e ee eee eee e 
i E e A ES | E 
Lee ac ee 
= aa e (| 


No flow to compressor's seals leading to damage; possible limited flammable gas vent to atmosphere. Very limited 
impact to operator is expected. 


No flow to compressor's seals leading to damage; possible limited flammable gas vent to atmosphere. 


No flow to compressor's seals leading to damage; possible limited plant shut down. 


| 12 [Team agrees to maintain 2 oo 3 voting logic in order to have high realiabilty against spurious trip . 
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ENPPI 


ICARO SIL Allocation (LOPA methodology) 
QASR Compression project 


Initiation Time risk Vulnerability | Additional |Intermediate} SIF integritiy 
likelihood el he ae (health) Event 
(occ./year) likelihood 
1,00 1,00 1,00 


Overheating of QA-E-8007 0,10 1,00 0,01 
leading to mechanical putting to maximum 
damage power QA-E-8007 


Spurious closure of 0,05 1,00 0,10 0,10 1,00 0,01 
ESDV025 on inlet 
line to existing 
facility when the 
line is in use 


a CC CC CC 
Li cr A S S O a E S E 
D a eT 
Ey = CAA ee eee ee 


Possibility of release of nitrogen. Potential for injury 
Negligible impact due to nitrogen dispersion 
Mechanical damage of nitrogen circuit and stop of production for some days + cost of repair. availabilty of bypass line 


of QA-E-8007. 


DICO13 with regulation of QA-E-8007 
igh temperature alarm on TDICO13 


TZA006 high high temperature interlock to shut down electrical heating on QA-E-8007 (Classified as SIL 2) 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


TITOO6 HH Protection against high high temperature in QA-E-8007 outlet 


QASR Compression project 


Initiation Vulnerability | Additional |Intermediate| SIF integritiy 
likelihood Event 
(occ./year) likelihood 
Overheating of QA-E-8007 Failure of TDICO13 
leading to mechanical putting to maximum 
damage power QA-E-8007 


Spurious closure of 
ESDV025 on inlet 
line to existing 
facility when the 
line is in use 


D e a E a E E A A A A 
ee ae a a ee ee ee ee eee ee 
Ld ue e ee ee ee ee ee eee 


NOTES 


Possibility of release of nitrogen. Potential for injury 
E |Negligible impact due to nitrogen dispersion 
A |Mechanical damage of nitrogen circuit and stop of production for short period + cost of repair. 


E 
Eee 
a OE 


5S 
| 6 [TDIC013 with regulation of QA-E-8007 

High temperature alarm on TDIC013 

| 9 |TZA016 high high temperature interlock to shut down electrical heating on QA-E-8007 
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ICARO SIL Allocation (LOPA methodology) ENPPI 


QASR Compression project 
| Interlock ——— ű e| PITXXXA HH (2) Protection against high high pressure down stream letdown package QA-A-8004 


Impact event description ; Initiation 
likelihood Event 
(occ./year) likelihood 
Overpressurization of Failure open of 
Nitrogen header to gas letdown package 
turbine seals leading to 
mechanical damage. 


a SC CC SC CC 
a ee ee ee es ee ee ee eee 
aa ee E E a E a E 
H = a e a a E a a S E 


Possibility of release of nitrogen. Potential for permenant injury, since letdown package is installed inside a confined 
area. 

No impact on environment 

Unexpected complete shut down of site (gas plant and oil plant) for one day. 


Install PSV downstream letdown package QA-A-8004 sized for control valve failure in order 
to reduce the SIL value from 3 to 1. 
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